Privacy Policy
Last updated 16 August 2026
1. Scope
This policy explains how NGB LAB SOLUTIONS LLC (“Galinum”) handles personal data. It covers two different kinds of data, and they have different rules:
- Account data: data about our customers and the people who use our dashboard. We are the controller for this data.
- End-user data: data about our customers' own users, which customers send us through the SDK and API. We are the processor for this data, and our customer is the controller.
2. Account data we collect
- Account and profile: name, email address, organization name, and password or Google sign-in identifier.
- Billing: billing address, tax identification number, and payment records. Stripe handles the card itself; we never store card numbers.
- Product usage: pages viewed in the dashboard, actions taken, API requests, and campaign activity.
- Technical logs: IP address, browser and device information, and timestamps, which we use for security and debugging.
- Waitlist and support: the email address and message content you send us.
We use account data to provide and secure the service, to bill you, to answer support requests, and to send service and product email. We keep this on the legal basis of performing our contract with you, our legitimate interest in running and securing the service, and consent where the law requires it.
3. End-user data we process for customers
Our customers install the SDK in their product and send us the data they need for targeting and measurement: an end-user identifier, traits they choose to send, product events, and the delivery record of each message (shown, clicked, dismissed, converted).
We process this data only to run the service for that customer and on that customer’s instructions. We do not sell it, and we do not use it to build advertising profiles or to train general-purpose AI models. Customers choose what they send: they should not send special-category data or more personal data than their campaigns need.
If you are an end user of a product that uses Galinum, contact that product’s operator to exercise your rights. We will help them respond.
4. Subprocessors
We use these providers to run the service:
- Vercel: Application hosting and delivery (United States)
- PlanetScale: Managed Postgres database (United States)
- Cloudflare R2: Object storage for campaign media (United States)
- Stripe: Payments, subscriptions, and tax calculation
- Resend: Transactional and product email
- Google: Sign-in with Google, and AI model processing for agent features
Each provider is bound by a data-processing agreement and may process data in the United States. We will update this list before a new subprocessor starts processing customer data.
5. Cookies and similar technology
We use only what the service needs to work: a session cookie to keep you signed in, a cookie that remembers your selected project, and browser local storage for your theme choice. We do not use advertising cookies.
6. How long we keep data
- Account data: for the life of the account, and up to 12 months after you close it.
- Billing records: for as long as tax and accounting law requires, normally 7 years.
- End-user data: for as long as the customer's account is active. We delete or return it within 30 days after the customer's account closes or on the customer's written request.
- Technical logs: normally up to 90 days.
7. Security
We encrypt data in transit, store API keys only as hashes, restrict production access to the people who need it, and separate the credentials that can change the database from the ones the application runs with.
8. Your rights
Depending on where you live, you can ask us to access, correct, export, or delete your personal data, to restrict or object to processing, or to withdraw consent. Write to support and we will respond within the time the law allows. You can also complain to your local data protection authority. We do not sell personal data or share it for cross-context behavioral advertising.
9. Children
Galinum is a business product and is not directed at children under 16. We do not knowingly collect their personal data.
10. Changes and contact
We will post any update here with a new “last updated” date and email account owners about material changes. Our Terms of Service govern your use of the service.
NGB LAB SOLUTIONS LLC
30 North Gould Street, Ste R
Sheridan, WY 82801, United States
[email protected]